| Package | Affected versions | Patched versions |
|---|---|---|
| monstra cms | = 1.6 |
Monstra CMS 1.6 allows XSS via an uploaded SVG document to the admin/index.php?id=filesmanager&path=uploads/ URI. NOTE: this is a discontinued product.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free